Hello, I have a request to build a AVD environment, with Multiuser-Session hosts OS (W11). But Cloud only. No on-prem AD DS. But the customer has Entra Domain Services. My idea is to use Entra Domain Services to configure the Session hosts with traditional GPOs. Is this a good idea? Intune is not an option i am afraid. Another question is, how to do it? During deployment what to select to Join to: Entra ID or Active Directory? As I understood there is a one way sync from Entra ID to Entra Doman Services. If I would choose Active Directory join, and use the credentials of Entra Domain Services, then the Session host would be only Entra Domain Service joined? If I choose Entra ID, then it would join to Entra ID and be Synced to Entra Domain Services? What is the correct way?

Entra Domain Services is not built for end user device identity- users will not have SSO to Entra IS from within the virtual desktop. Why is Intune not an option?

Thanks, yes, i did research and looks like SSO will not work. I checked again Intune: Using Azure Virtual Desktop multi-session with Microsoft Intune - Microsoft Intune | Microsoft Learn It looks like it should be possible, maybe I still had the "no Intune" in mind because of former Citrix DaaS not supported scenarios. Do you have experience with Multisession OS AVDs managed via Intune? Are there anything which I should keep in mind/look after etc?

The only workaround you may need is embedding storage account keys for accessing Azure Files

Right now the plan is thar Azure Files will be only used for FsLogix Profile Container. You mean some different scenario, right?

No, that scenario

can you give me a bit more details about this?

yes that would be the way Robert. If the customers does have the licenses, why not using Intune for a "basic" management? Try to consider some tool like "AVD Hydra" to simplify the management.